Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
File: qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json)
Hash identifier: unfiKmipRXJKxeFMB8HNoNMikYUFlto53fVHS7Wia+k=
Subject key identifier: 2B:05:E1:FC:F4:4C:5C:80:D7:CC:8F:84:35:E7:F6:19:7F:76:81:BF
Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F
Certificate issuer: /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
Certificate serial: 059C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
Manifest number: 0594
Signing time: Thu 30 Jan 2025 23:15:41 +0000
Manifest this update: Thu 30 Jan 2025 23:15:40 +0000
Manifest next update: Thu 06 Feb 2025 23:15:40 +0000
Files and hashes: 1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: bIFo7DQO/kxJgadI+A4wFqfO/sD+Uzdw4XOppDjsL94=)
2: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: zsrAxxFfRp403bl7GSNrqmEpDz70fh0k4+NlvivXGV8=)
3: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: +PXzRKDa1pBP+673hTlbAtrA0Uh8pso6MOGI9Du2wJM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1436 (0x59c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
Validity
Not Before: Jan 30 23:15:40 2025 GMT
Not After : Feb 6 23:15:40 2025 GMT
Subject: CN=679c081d-9880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a2:91:aa:48:32:60:e3:0d:a4:61:2d:57:3b:
a6:02:75:4c:6d:0f:b8:42:25:e9:e4:5a:04:ea:35:
33:dc:56:6a:3c:c2:c8:fa:d1:78:ed:8c:f2:95:5d:
46:5d:3c:5d:49:c1:1f:70:b5:b0:67:67:53:9e:a4:
0b:2b:15:68:ec:2a:2b:d5:dc:db:3f:9d:13:16:ae:
2f:9a:a6:42:b6:5f:50:fc:ff:67:09:ff:2d:bb:bc:
38:9a:87:3c:e1:b8:57:30:9c:1b:6f:98:55:36:1c:
74:d4:46:24:11:f5:6b:c7:11:13:eb:5f:38:46:73:
c7:a9:2b:77:4c:2c:a9:51:c5:bd:3c:12:cd:53:b5:
f8:51:bc:06:d9:92:39:1d:67:be:13:91:26:02:23:
9f:2c:ba:b3:03:ae:68:a3:11:68:1b:42:7a:a8:85:
c1:9b:bc:53:56:31:25:26:b5:4a:ba:57:00:94:19:
42:e9:1b:f1:39:6d:01:23:eb:12:1c:b6:82:22:e6:
d9:92:fe:0d:0d:05:1d:53:4c:c7:9c:22:41:95:c4:
3b:f7:94:04:ab:e6:8f:3c:68:49:99:8f:91:ed:c4:
60:57:18:43:fe:4a:f5:07:dd:7e:98:ee:f0:c5:96:
45:ee:39:75:98:68:6e:6a:a1:93:42:91:53:03:94:
46:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:05:E1:FC:F4:4C:5C:80:D7:CC:8F:84:35:E7:F6:19:7F:76:81:BF
X509v3 Authority Key Identifier:
keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1f:2c:c6:bd:4d:19:a9:fb:73:89:f6:47:f2:80:a8:e7:75:
e5:a7:3c:f4:4c:97:1c:85:71:b5:ea:4b:c2:56:99:39:53:46:
6c:23:74:aa:74:dd:83:e4:2a:22:a1:85:88:b4:5c:6d:d5:22:
3c:c0:6e:52:1b:87:fe:08:47:d9:a3:f5:bb:62:72:4d:c6:09:
5f:d9:b2:3c:12:07:9c:ef:a7:e5:32:61:73:a8:2e:40:d1:a5:
e4:55:8e:fa:52:b6:e4:ec:c5:32:80:f8:b2:54:50:0b:7f:1a:
2e:a0:31:11:94:fc:f0:6c:f6:00:c3:4e:6a:e7:12:3f:6c:8c:
76:dd:c7:dc:3a:4d:4a:e0:5b:03:1a:79:d2:42:b8:17:29:a1:
80:02:cc:c8:34:a9:a4:0c:7d:a8:90:0b:42:5a:89:61:92:52:
04:d5:1b:bd:a7:19:da:82:f8:db:26:8a:0a:bf:73:20:31:6d:
83:2e:65:55:bd:5f:3c:f8:f9:da:63:d5:d9:43:5c:87:8a:5f:
6d:b7:b3:ea:cb:65:4a:06:e4:01:70:11:aa:1a:e1:0d:17:24:
6b:a2:60:06:10:22:b7:d4:f6:53:67:0c:7a:56:c8:3e:1d:1c:
87:ef:e5:a5:47:41:0c:b8:86:76:ac:ec:4b:09:4e:27:54:76:
22:3c:b8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:20 2025 by rpki-client